Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/4E8DA224547711EF9EDD014DC4F9AE02.roa
File: 4E8DA224547711EF9EDD014DC4F9AE02.roa (raw, json)
Hash identifier: befFFpozyGTTud2Z8wsHoOu5TcgcBDvFYmEhZzj+W4I=
Subject key identifier: AE:77:13:3A:80:22:3C:3C:30:B6:BE:61:8E:1A:CF:D7:A4:D0:7F:CA
Certificate issuer: /CN=A91CFD43/serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332
Certificate serial: 0263
Authority key identifier: FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/4E8DA224547711EF9EDD014DC4F9AE02.roa
Signing time: Wed 07 Aug 2024 04:41:27 +0000
ROA not before: Wed 07 Aug 2024 04:41:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18390
IP address blocks: 202.87.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 611 (0x263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFD43
Validity
Not Before: Aug 7 04:41:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66b2faf6-16b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ca:87:9d:7e:76:8a:07:9e:dc:4a:20:1f:39:
b8:32:af:17:21:4d:ec:c5:ee:aa:36:b0:e0:3f:86:
2a:82:54:22:18:fd:a6:f8:bf:26:e6:3d:8f:25:2f:
50:cd:ba:50:c4:7a:90:c3:11:ab:70:63:0a:5e:3d:
0e:fe:5c:e7:19:85:d8:c4:91:ab:c7:11:78:b5:c8:
41:82:15:18:ad:32:29:14:a0:cb:0e:94:8d:34:5a:
8b:ef:17:52:97:96:06:0b:8b:ee:d1:55:9d:5c:47:
79:d5:7f:65:fc:ad:34:6c:a6:49:77:0c:0e:e8:06:
5b:1b:b3:e2:47:4c:f0:5c:64:74:a1:57:71:29:fb:
cd:06:0e:62:a1:e7:5b:ff:19:a9:20:60:2d:75:0f:
14:bf:6b:dd:06:aa:8e:61:c1:b7:02:23:57:90:63:
e3:63:b7:98:67:71:02:a4:8d:ef:a2:8a:d5:be:68:
86:bf:c9:cc:f7:fd:38:0e:42:87:b3:b7:ab:2a:75:
ea:83:a5:75:7f:dc:58:18:04:27:44:02:f8:e0:7f:
f9:ca:2b:39:7f:67:58:6d:45:dd:13:7f:5d:e3:34:
05:80:94:8e:8d:8a:bb:e3:74:04:3c:e3:52:32:9e:
e2:77:29:b7:1c:77:e5:c2:d2:55:16:67:75:06:32:
db:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:77:13:3A:80:22:3C:3C:30:B6:BE:61:8E:1A:CF:D7:A4:D0:7F:CA
X509v3 Authority Key Identifier:
keyid:FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/4E8DA224547711EF9EDD014DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.87.160.0/20
Signature Algorithm: sha256WithRSAEncryption
23:37:4f:1e:cc:84:6d:f8:0e:bd:ab:66:44:c8:9d:4f:0e:e3:
f6:4e:c3:2c:07:20:58:c5:a4:11:af:b3:da:84:38:48:0b:85:
e2:c8:28:45:b0:4f:f1:16:18:3d:54:c6:ce:e6:83:ec:8b:bf:
ea:1c:88:f5:c8:d0:bb:f0:99:16:b7:7d:47:ec:4a:11:6a:0e:
96:84:dd:89:c6:f1:41:31:b0:4f:0a:70:73:1b:3c:a9:54:53:
89:b0:31:35:9b:70:d2:57:85:5a:18:1a:b2:8d:54:0e:a5:8b:
f5:a4:3f:94:25:53:6f:db:97:02:95:34:20:f8:ce:89:6a:30:
71:6d:eb:f8:27:be:99:7f:da:bf:53:3d:c2:35:19:ef:ee:5d:
6d:63:6f:c6:6a:39:a3:67:07:0d:75:1a:f4:c3:de:3a:b7:c2:
03:b1:3d:dd:da:49:7f:2e:d1:ff:e4:51:5b:1b:a0:ec:34:21:
07:ee:f8:d9:d1:8a:b8:c2:dd:07:b6:c3:3f:95:b1:3b:8d:cf:
22:04:b9:ad:e6:ab:5b:d3:65:b1:df:3b:04:76:c8:08:b0:79:
04:ff:90:1e:62:68:6a:61:c6:a7:9c:ad:09:b8:40:a4:dc:5f:
ff:42:82:48:d0:2b:fb:d1:69:fa:a9:24:a5:90:82:88:4d:40:
e9:5e:60:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:10:06 2025 by rpki-client